Description
When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate easily, add the desired mask (usually /128) to the addresses. Only auth proxy is affected; Okta, SAML, LDAP, etc are unaffected here.
Remediation
References
Related Vulnerabilities
Drupal Core 8.9.x Multiple Security Bypass Vulnerabilities (8.9.0 - 8.9.18)
Joomla Improper Input Validation Vulnerability (CVE-2011-2892)
WordPress Plugin CONTUS VBLOG-Video Blogging 'save.php' Arbitrary File Upload (1.0)
WordPress Plugin WL Katalogsok PHP Object Injection (3.5.4)
CrushFTP Server Deserialization of Untrusted Data Vulnerability (CVE-2017-14035)